该文介绍了一种代码执行前的安全检查机制，通过政策文件检查新类，结合证书库和代码分析器来评估潜在的资源使用和证书要求。信任评估器根据代码标识、资源使用情况和证书确定是否符合安全策略，允许代码执行。政策和证书可以以层次形式指定，允许将部分安全责任委托给可信实体。
摘要：
A trust manager examines each new class before it is allowed to execute by examining a policy file which includes data structures defining security policies of the user system, a certificate repository for storing a plurality of certificates, a certificate being a data record which is digitally signed and which certifies claims relevant to a security evaluation, a code examiner adapted to analyze the portion of code to determine potential resource use of the portion of code and a trust evaluator adapted to evaluate certificate requirements of the portion of code based on policy rules extracted from the policy file and the potential resource use specified by the code examiner. The trust evaluator also determines, from certificates from the certificate repository and a code identifier identifying the portion of code, whether execution of the portion of code is allowed by the policy rules given the potential resource use, the code supplier and applicable certificates. Certificates and policies can be specified in hierarchical form, so that some levels of security can be delegated to trusted entities.
展开
扫一扫
4708
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
